hijakc log fra w2k server med print virus

jeg kigger da lige

Kør HijackThis, scan og sæt et flueben ud for denne linie - luk øvrige programvinduer - klik "Fix checked":

O9 - Extra button: Related - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O9 - Extra 'Tools' menuitem: Show &Related Links - {c95fe080-8f5d-11d2-a20b-00aa003c157a} - C:\WINNT\web\related.htm
O23 - Service: Microsoft SystemF - Unknown - C:\WINNT\system32\entry.exe (file missing)


Download og gem denne scanner på skrivebordet.
http://www.spywareinfo.dk/download/mwav.exe

Slå systemgendannelse fra.. genstart i fejlsikret tilstand

Klik på mwav.exe som du hentede, programmet pakker sig selv ud og starter.
Sæt flueben i følgende:
Memory, Startup folders, drive, Registry, System folders og Services.
Sæt prik i følgende:
All local drives og Scan all files

Slet alt den finder..


Genstart normalt og smid en ny log fil herind så tager jeg et kig på log'en igen og sikre mig der ikke er noget som er blevet overset.

Lige et indspark fra sidelinjen:
Systemgendannelse findes IKKE i Win2K!
;<D

sorry hehe, men så ignores det selvfølgelig bare men følge resten af "guiden"

Undskyld ventetiden, men det har taget lidt lang tid..
Her er loggen fra mwav.exe. Den har godt nok fundet en del mere en Norton Antivirus Corporate Edition....

File C:\WINNT\system32\entry.old tagged as not-a-virus:RiskWare.ftp.Serv-U.50011. No Action Taken.
File C:\WINNT\system32\win32.dll infected by "Backdoor.Win32.Ucri.a" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02100000.VBN infected by "Backdoor.Win32.Agobot.uq" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\02100002.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\03580000.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\05640004.VBN infected by "Backdoor.Win32.Agobot.wn" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\05800000.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40013.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40013.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40015.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40015.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40016.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40016.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40017.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40017.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40018.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40018.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40019.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A40019.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A4001A.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A4001A.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A4001B.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A4001B.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A80015.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A80015.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A80016.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A80016.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A80017.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A80017.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A80018.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A80018.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A80019.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A80019.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A8001A.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06A8001A.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC0016.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC0016.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC0017.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC0017.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC0018.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC0018.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC0019.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC0019.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC001A.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC001A.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC001B.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06AC001B.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B00017.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B00017.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B00018.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B00018.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B00019.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B00019.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B0001A.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B0001A.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B0001B.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B0001B.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B0001C.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B0001C.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B40015.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B40015.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B40016.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B40016.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B40017.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B40017.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B40018.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B40018.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B40019.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B40019.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B4001A.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B4001A.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B4001B.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B4001B.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B80016.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B80016.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B80017.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B80017.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B80018.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B80018.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B80019.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B80019.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B8001A.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06B8001A.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0014.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0014.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0015.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0015.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0016.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0016.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0017.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0017.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0018.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0018.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0019.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC0019.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC001A.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06BC001A.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00013.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00013.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00014.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00014.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00015.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00015.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00016.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00016.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00017.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00017.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00018.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00018.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00019.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C00019.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C40014.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C40014.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C40016.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C40016.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C40017.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C40017.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C40018.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C40018.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C40019.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C40019.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C4001A.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C4001A.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C4001B.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C4001B.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C4001C.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C4001C.VBN infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C80017.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C80017.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C80018.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C80018.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C80019.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C80019.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C8001A.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C8001A.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C8001B.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C8001B.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C8001C.VBN infected by "Win32.Xorala" Virus. Action Taken: File Disinfected.
File C:\Documents and Settings\All Users\Application Data\Symantec\Norton AntiVirus Corporate Edition\7.5\Quarantine\06C8001C.VBN infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File C:\WINNT\system32\entry.old tagged as not-a-virus:RiskWare.ftp.Serv-U.50011. No Action Taken.
File D:\Arkiv sager\vbrun6win.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File D:\Arkiv sager\vbrun70sp4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File D:\Billeder\tcpipsvc.exe infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File D:\Billeder\vbrun6win.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File D:\Billeder\vbrun70sp4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File D:\Serverting\EDB\AutoCad 2002\vbrun6win.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File D:\Serverting\EDB\AutoCad 2002\vbrun70sp4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File D:\Serverting\EDB\Opstartsting\vbrun6win.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File D:\Serverting\EDB\Opstartsting\vbrun70sp4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File D:\Tilbudssager\vbrun70sp4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 09.12.2004\Billeder\rar.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 17.01.2005\Billeder\tcpipsvc.exe infected by "Backdoor.Win32.Agobot.wl" Virus. Action Taken: File Renamed.
File G:\Backup d. 17.01.2005\Billeder\vbrun6win.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 17.01.2005\Billeder\vbrun70sp4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 17.01.2005\Sager\vbrun6win.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 17.01.2005\Serverting\EDB\AutoCad 2002\vbrun6win.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 17.01.2005\Serverting\EDB\AutoCad 2002\vbrun70sp4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 17.01.2005\Serverting\EDB\Opstartsting\vbrun6win.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 17.01.2005\Serverting\EDB\Opstartsting\vbrun70sp4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 17.01.2005\Tilbudssager\vbrun6win.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 17.01.2005\Tilbudssager\vbrun70sp4.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.
File G:\Backup d. 26.11.2004\Billeder\rar.exe infected by "Backdoor.Win32.Agobot.gen" Virus. Action Taken: File Renamed.


Er det noget jeg skal gøre mere ved eller skal jeg bare prøve at scanne med hijack igen ?

Logfile of HijackThis v1.99.0
Scan saved at 09:54:20, on 20-01-2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v6.00 SP1 (6.00.2800.1106)

Running processes:
C:\WINNT\System32\smss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\Program Files\Sygate\SPF\smc.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\msdtc.exe
C:\PROGRA~1\SAV\DefWatch.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\cba\pds.exe
C:\WINNT\System32\llssrv.exe
C:\PROGRA~1\SAV\Rtvscan.exe
C:\WINNT\system32\regsvc.exe
C:\Program Files\Dantz\Retrospect\retrorun.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\Dfssvc.exe
C:\WINNT\Explorer.EXE
C:\WINNT\system32\RunDll32.exe
C:\WINNT\System32\sistray.EXE
C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb05.exe
C:\WINNT\System32\hphmon04.exe
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
C:\PROGRA~1\SAV\vptray.exe
C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
C:\WINNT\MXOALDR.EXE
C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
C:\WINNT\system32\internat.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\SpywareGuard\sgmain.exe
C:\WINNT\System32\HPHipm11.exe
C:\Program Files\SpywareGuard\sgbhp.exe
C:\Documents and Settings\Administrator\Desktop\New Folder\hjt.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://signon.stofanet.dk/
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = 127.0.0.1
O2 - BHO: SpywareGuard Download Protection - {4A368E80-174F-4872-96B5-0B27DDD11DB2} - C:\Program Files\SpywareGuard\dlprotect.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: PCTools Site Guard - {5C8B2A36-3DB1-42A4-A3CB-D426709BBFEB} - C:\PROGRA~1\SPYWAR~3\tools\iesdsg.dll
O2 - BHO: PCTools Browser Monitor - {B56A7D7D-6927-48C8-A975-17DF180C71AC} - C:\PROGRA~1\SPYWAR~3\tools\iesdpb.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [SiS Tray] C:\WINNT\System32\sistray.EXE
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [HPDJ Taskbar Utility] C:\WINNT\system32\spool\drivers\w32x86\3\hpztsb05.exe
O4 - HKLM\..\Run: [HPHmon04] C:\WINNT\System32\hphmon04.exe
O4 - HKLM\..\Run: [HPHUPD04] "C:\Program Files\HP Photosmart 11\hphinstall\UniPatch\hphupd04.exe"
O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Program Files\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
O4 - HKLM\..\Run: [vptray] C:\PROGRA~1\SAV\vptray.exe
O4 - HKLM\..\Run: [MaxtorOneTouch] C:\PROGRA~1\Maxtor\OneTouch\Utils\OneTouch.exe
O4 - HKLM\..\Run: [MXO Auto Loader] C:\WINNT\MXOALDR.EXE
O4 - HKLM\..\Run: [SmcService] C:\PROGRA~1\Sygate\SPF\smc.exe -startgui
O4 - HKCU\..\Run: [internat.exe] internat.exe
O4 - HKCU\..\Run: [Spyware Doctor] "C:\Program Files\Spyware Doctor\swdoctor.exe" /Q
O4 - Startup: SpywareGuard.lnk = C:\Program Files\SpywareGuard\sgmain.exe
O9 - Extra button: Spyware Doctor - {2D663D1A-8670-49D9-A1A5-4C56B4E14E84} - C:\PROGRA~1\SPYWAR~3\tools\iesdpb.dll
O23 - Service: DefWatch - Symantec Corporation - C:\PROGRA~1\SAV\DefWatch.exe
O23 - Service: Logical Disk Manager Administrative Service - VERITAS Software Corp. - C:\WINNT\System32\dmadmin.exe
O23 - Service: Intel PDS - Intel® Corporation - C:\WINNT\System32\cba\pds.exe
O23 - Service: Symantec AntiVirus Server - Symantec Corporation - C:\PROGRA~1\SAV\Rtvscan.exe
O23 - Service: Pml Driver HPH11 - HP - C:\WINNT\System32\HPHipm11.exe
O23 - Service: Retrospect Launcher - Dantz Development Corporation - C:\Program Files\Dantz\Retrospect\retrorun.exe
O23 - Service: Sygate Personal Firewall - Sygate Technologies, Inc. - C:\Program Files\Sygate\SPF\smc.exe

Din computer er ren igen

takker